Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 305
  • Last Modified:

How to transfer FSMO roles

Hello:

I am preparing to transfer the FSMO Roles from 1 Windows Domain Controller to another DC.  I have reviewed the process from the following web site: https://www.petri.com/seizing_fsmo_roles  ... and I have created more specific instructions for my network (Attached).  

I unfortunately do not have a test Lab or Test Domain to practice with on and I have not transferred roles in a very long time.  Hence, I wanted to verify the steps involved.  I created a similar question earlier
 ( https://www.experts-exchange.com/questions/28977018/How-to-swap-out-existing-domain-controllers-with-2-new-domain-Controllers.html ) ; but this is a little different and specifically focused on transferring the FSMO roles.

I am particularly concerned with the process to "To Transfer the Schema Master Role:" section (page 5, #8).  Even though I received a warning I think I should be able to transfer the Schema Master Role, as documented.  Or am I wrong and I should go about it a different way?

I wanted to ask other Network Administrators who may have done this before.  Just to put my mind at ease.
Procedure-to-transfer-the-Time-setti.pdf
0
Pkafkas
Asked:
Pkafkas
2 Solutions
 
DrDave242Commented:
Even though I received a warning I think I should be able to transfer the Schema Master Role, as documented.  Or am I wrong and I should go about it a different way?

This warning is perfectly normal, because that console is connecting to a domain controller that doesn't hold the Schema Master role. When you do this, you can view the schema but can't change it. You can still transfer the role, though.
0
 
Todd NelsonSystems EngineerCommented:
Moving FSMO roles is essentially a non-event.

Use this article for moving Active Directory FSMO roles ... http://trunkofmemorie.blogspot.co.uk/2012/12/how-to-change-fsmo-roles-in-windows-2012.html

FYI...
You should never have to use ntdsutil to move FSMO roles unless one of your domain controllers crashed and is not receoverable--even with RODCs.

This article will help you to understand the best placement of each role ... https://support.microsoft.com/en-us/kb/223346

For transferring time services, I always use the following commands...

From an elevated PowerShell, run on PDC Emulator (First DC)...

w32tm.exe /config /manualpeerlist:”0.us.pool.ntp.org 1.us.pool.ntp.org 2.us.pool.ntp.org 3.us.pool.ntp.org” /syncfromflags:manual /reliable:YES /update
Restart-Service w32time

Open in new window



Run these commands on all other DCs...

w32tm /config /syncfromflags:domhier /update
Restart-Service w32time

Open in new window

0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now